CVE-2021-29117

CVE-2021-29117 is a use-after-free vulnerability in Esri ArcReader 10.8.1 and earlier versions, allowing unauthenticated attackers to achieve arbitrary code execution when parsing a specially crafted file. This high-severity vulnerability (CVSS 7.8) requires user interaction, as the attacker must trick the victim into opening the malicious file, but once triggered, it grants full control over the affected system in the context of the current user. Despite its potential impact, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.